This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/pgoXDP1h0nWBwbv9FG2W5mHI85k.roa File: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (raw, json) Hash identifier: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM= Subject key identifier: A6:0A:17:0C:FD:61:D2:75:81:C1:BB:FD:14:6D:96:E6:61:C8:F3:99 Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Certificate serial: 019B7C805994665320D9D5463474F678C43D Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/pgoXDP1h0nWBwbv9FG2W5mHI85k.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 194.179.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:59:94:66:53:20:d9:d5:46:34:74:f6:78:c4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60a170cfd61d27581c1bbfd146d96e661c8f399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:79:35:86:c4:95:20:d1:e4:a3:43:a7:c5: 93:f0:9f:a0:31:80:6d:b4:0d:97:bf:56:b3:60:46: fe:98:34:33:52:73:ca:cc:3f:6b:5f:3a:63:23:58: b9:82:77:59:f5:49:2d:ac:cc:6d:78:57:aa:99:67: 6a:ec:e7:45:8b:89:f6:87:6d:80:64:f0:75:58:f2: ae:ad:ad:c5:9e:9c:a3:c0:13:ec:50:94:f0:c1:34: c4:b6:12:bd:0d:24:d8:59:69:6c:d8:49:09:68:99: ce:7b:48:e2:f6:58:d1:19:e3:d7:77:11:d3:43:65: 35:68:35:5a:da:69:cf:8a:70:b5:a5:11:57:f8:2a: 39:db:82:a3:ca:c4:ea:75:5f:3f:91:8c:ab:6f:31: 56:c2:c9:f5:cc:16:d3:27:b4:cd:b3:97:16:60:ce: 27:02:4f:17:fd:64:1a:27:50:b2:e7:7b:84:9f:ca: a4:cd:e0:e1:54:6c:f9:8a:8b:c2:41:b9:76:3e:27: 5f:d6:65:5a:74:d7:2e:01:53:13:d1:40:07:3d:fd: 7b:9c:29:75:e4:6d:d9:41:b5:e2:11:e6:d1:ed:ed: c1:e0:4e:4a:ff:46:c7:61:7b:74:ed:e7:bb:f8:1d: 0d:87:bb:cc:df:f6:dc:30:de:42:8b:76:06:54:a0: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:17:0C:FD:61:D2:75:81:C1:BB:FD:14:6D:96:E6:61:C8:F3:99 X509v3 Authority Key Identifier: keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/pgoXDP1h0nWBwbv9FG2W5mHI85k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.152.0/22 Signature Algorithm: sha256WithRSAEncryption ab:b5:61:e9:5a:20:c6:0c:10:05:df:f4:2f:c1:06:c5:a0:83: 1c:56:e9:00:50:d5:96:e9:3d:3b:51:26:23:1e:c5:bb:02:c2: 24:f0:27:b1:97:43:4b:7e:c9:b6:4d:db:52:f8:aa:8c:f4:8b: 88:dd:2f:58:03:ca:ee:1e:b0:89:3a:5e:ab:90:d5:96:01:e9: 01:de:89:0f:d2:7b:81:b0:af:3c:61:e9:28:45:95:1f:46:8f: 85:8e:bf:86:26:e7:55:1b:cc:cb:28:bc:15:d6:2e:c6:bf:ea: 4c:28:b7:42:a6:65:5d:a0:7b:af:58:d2:db:d8:cd:ee:94:b6: 0e:b3:f4:b2:25:72:fd:2b:06:a4:1e:c5:80:07:f2:b8:0d:14: 98:cf:65:ef:3c:84:b4:1c:22:1b:a4:48:88:e9:4f:55:c7:9c: 2e:c7:46:ae:f4:e4:b0:79:77:39:25:7a:9a:f4:51:c0:f7:e8: 8e:13:d1:65:80:cd:d3:8e:bb:4b:81:9f:6d:5c:f1:22:27:34: f5:c1:51:42:67:d9:2d:8e:bd:8b:8d:78:f9:66:cf:23:eb:c7: 9d:e6:43:d8:cc:0f:6e:b1:4f:c6:f9:73:13:9e:4a:12:6c:13: 49:2f:8a:78:a2:14:07:1a:2b:d8:71:d3:e6:f3:04:5e:7a:05: 1d:14:a2:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFmUZlMg2dVGNHT2eMQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx NjRiZDEwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBhMTcwY2ZkNjFkMjc1ODFjMWJiZmQxNDZkOTZlNjYxYzhmMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/p5NYbElSDR5KNDp8WT8J+gMYBt tA2Xv1azYEb+mDQzUnPKzD9rXzpjI1i5gndZ9UktrMxteFeqmWdq7OdFi4n2h22A ZPB1WPKura3FnpyjwBPsUJTwwTTEthK9DSTYWWls2EkJaJnOe0ji9ljRGePXdxHT Q2U1aDVa2mnPinC1pRFX+Co524KjysTqdV8/kYyrbzFWwsn1zBbTJ7TNs5cWYM4n Ak8X/WQaJ1Cy53uEn8qkzeDhVGz5iovCQbl2Pidf1mVadNcuAVMT0UAHPf17nCl1 5G3ZQbXiEebR7e3B4E5K/0bHYXt07ee7+B0Nh7vM3/bcMN5Ci3YGVKD9VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYKFwz9YdJ1gcG7/RRtluZhyPOZMB8GA1UdIwQY MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt NzM3MGZkODBkZjZjLzEvcGdvWERQMWgwbldCd2J2OUZHMlc1bUhJODVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrOYMA0G CSqGSIb3DQEBCwUAA4IBAQCrtWHpWiDGDBAF3/QvwQbFoIMcVukAUNWW6T07USYj HsW7AsIk8Cexl0NLfsm2TdtS+KqM9IuI3S9YA8ruHrCJOl6rkNWWAekB3okP0nuB sK88YekoRZUfRo+Fjr+GJudVG8zLKLwV1i7Gv+pMKLdCpmVdoHuvWNLb2M3ulLYO s/SyJXL9KwakHsWAB/K4DRSYz2XvPIS0HCIbpEiI6U9Vx5wux0au9OSweXc5JXqa 9FHA9+iOE9FlgM3TjrtLgZ9tXPEiJzT1wVFCZ9ktjr2LjXj5Zs8j68ed5kPYzA9u sU/G+XMTnkoSbBNJL4p4ohQHGivYcdPm8wReegUdFKJp -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client